$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft File: 9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft (raw, json) Hash identifier: QqJ3mK4R4hMsU8/khmyHQnaxFuM6dOLY9FmppU696tU= Subject key identifier: FE:E5:1D:43:56:C0:13:EB:DC:50:16:A6:9A:82:5A:75:8A:D2:FA:DB Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC Certificate issuer: /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC Certificate serial: 40A47C9779BB2AD050696DD497490EAD0F208907 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft Manifest number: 0204 Signing time: Mon 03 Nov 2025 13:38:23 +0000 Manifest this update: Mon 03 Nov 2025 13:33:23 +0000 Manifest next update: Tue 04 Nov 2025 15:46:23 +0000 Files and hashes: 1: 3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa (hash: nDza4jqziVmKHzwQVPEwkj3cfLuvclXjEookf3Nu5wA=) 2: 323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa (hash: PiW5duALHil8KLibp8tUS/Vk3EcvZD5ZMKNYP5RAazU=) 3: 323830343a326437303a3338303a3a2f34312d3431203d3e20323635323832.roa (hash: s2h6vUq4CrhJGp/OmYzcSio/QEhp40NZBlS/DTJvQuk=) 4: 9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl (hash: 3qPlwYdAsl1Bs9kDpm4MnInEGt5ndGMQHU4upUj6T2g=) 5: 323830343a326437303a3a2f33322d3332203d3e20323635323832.roa (hash: ahOVRiIgF91mmSeGHRbzjnkWmOsV1n5gdpPQK4xS5i0=) 6: 323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa (hash: PZ3dk2NnSu1iyy9Jup4MW5BVhNkg+prBIiOzpQwR4A0=) 7: 323830343a326437303a3238303a3a2f34312d3431203d3e20323635323832.roa (hash: kiSTfvoksKt5U+wMpQSC4vpXNSNXpFxgMP37xxtIWxg=) 8: 323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa (hash: 65z3zCSd2/jwqzGKfTXv4UDfHlO6ai3IoFHH1XPAIFs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a4:7c:97:79:bb:2a:d0:50:69:6d:d4:97:49:0e:ad:0f:20:89:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC Validity Not Before: Nov 3 13:33:23 2025 GMT Not After : Nov 4 15:46:23 2025 GMT Subject: CN=FEE51D4356C013EBDC5016A69A825A758AD2FADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:98:2a:8e:ae:3c:d8:dd:d4:76:02:50:b9: 1c:b1:de:78:3b:89:f4:d7:c2:eb:54:78:9b:36:cb: 5d:e7:cf:21:b2:ac:d1:0e:eb:12:2a:82:f9:15:2c: 00:d2:2e:c5:eb:63:fc:e5:e8:c6:01:f1:ed:35:93: 53:d0:7f:c9:7f:e0:4a:2c:64:d2:16:35:23:63:bc: 39:32:8d:77:95:e0:6e:78:26:7d:27:0e:d6:0a:aa: 9b:96:59:c4:c3:31:bc:3b:1a:87:e1:29:f9:e3:86: f4:94:c3:a0:d0:fa:f4:2f:9c:e5:61:fa:74:4f:9d: cf:a0:ba:57:f7:1b:50:ab:34:e0:40:94:0b:0d:4e: 2e:36:ae:20:28:a8:ba:38:d6:36:8f:50:aa:9a:3e: c6:25:83:30:ed:c8:bb:f7:44:d4:3e:f5:7d:7f:52: fa:73:f4:1e:af:e8:d3:9c:4b:10:cd:a4:0c:6a:82: c3:f4:36:6e:6f:fa:7d:3e:c6:c3:cb:a8:ba:ad:39: 42:3b:dc:ad:bd:e3:e1:d5:2c:89:e2:7c:0d:18:a1: 08:d1:6b:d4:8a:c3:f2:fc:03:4e:1e:e9:91:ad:80: d0:f9:f6:07:35:93:22:1d:21:8c:c4:5b:81:66:2c: 43:69:53:0e:f0:31:14:c4:18:bf:7c:cd:3b:1b:61: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E5:1D:43:56:C0:13:EB:DC:50:16:A6:9A:82:5A:75:8A:D2:FA:DB X509v3 Authority Key Identifier: keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1a:94:60:50:46:9f:c5:58:60:1a:6e:e2:72:55:5b:e3:36: f4:01:2f:04:ec:99:b0:67:2e:c8:19:1d:82:61:ae:31:04:8c: 96:be:1b:b5:9d:97:83:55:46:1b:21:58:65:ea:bb:c7:03:a0: b0:47:1a:1d:8b:9d:a6:91:2c:37:b1:33:c8:36:f0:f5:8e:32: d2:2f:8e:5d:cd:70:25:f5:12:24:9b:8e:cb:ed:e9:e8:05:65: 9a:17:07:b7:65:42:0b:ce:f7:77:e6:4b:2d:53:13:56:57:f1: 48:ae:3b:8d:0d:e5:c7:14:68:07:a0:a1:26:b9:db:a6:a0:d3: 6f:c3:3a:1c:84:79:27:48:be:15:0b:cd:af:2a:60:24:a2:8f: f2:89:6b:d9:25:fe:42:77:4c:4d:9b:37:65:df:ac:35:b0:18: 89:42:bd:f1:f2:36:96:e9:63:49:44:6f:70:68:ac:34:7b:8b: f0:19:74:e9:54:4b:05:19:99:dd:83:94:f9:a4:0a:82:c3:79: 9f:c5:d0:75:17:7a:f4:29:b0:26:08:8e:cb:95:5e:25:dc:6a: 34:2d:6b:92:7e:b3:d6:df:60:da:e1:40:b7:36:b3:fc:77:3d: 53:1e:1b:01:45:75:a1:79:1b:36:12:d8:db:be:fa:df:d5:17: a1:24:11:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQKR8l3m7KtBQaW3Ul0kOrQ8giQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNCNkQ1RUM1MzAwRDFBMzZGRjg5M0M2MEYzOTBENjRC RjAwRjFFQzAeFw0yNTExMDMxMzMzMjNaFw0yNTExMDQxNTQ2MjNaMDMxMTAvBgNV BAMTKEZFRTUxRDQzNTZDMDEzRUJEQzUwMTZBNjlBODI1QTc1OEFEMkZBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMJgqjq482N3UdgJQuRyx3ng7 ifTXwutUeJs2y13nzyGyrNEO6xIqgvkVLADSLsXrY/zl6MYB8e01k1PQf8l/4Eos ZNIWNSNjvDkyjXeV4G54Jn0nDtYKqpuWWcTDMbw7GofhKfnjhvSUw6DQ+vQvnOVh +nRPnc+gulf3G1CrNOBAlAsNTi42riAoqLo41jaPUKqaPsYlgzDtyLv3RNQ+9X1/ Uvpz9B6v6NOcSxDNpAxqgsP0Nm5v+n0+xsPLqLqtOUI73K294+HVLInifA0YoQjR a9SKw/L8A04e6ZGtgND59gc1kyIdIYzEW4FmLENpUw7wMRTEGL98zTsbYUGpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/uUdQ1bAE+vcUBammoJadYrS+tswHwYDVR0j BBgwFoAUnLbV7FMA0aNv+JPGDzkNZL8A8ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRF Tk4vMC85Q0I2RDVFQzUzMDBEMUEzNkZGODkzQzYwRjM5MEQ2NEJGMDBGMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQjZENUVDNTMwMEQxQTM2 RkY4OTNDNjBGMzkwRDY0QkYwMEYxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRFTk4vMC85 Q0I2RDVFQzUzMDBEMUEzNkZGODkzQzYwRjM5MEQ2NEJGMDBGMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgBqUYFBGn8VYYBpu4nJVW+M29AEvBOyZsGcuyBkdgmGuMQSMlr4btZ2Xg1VG GyFYZeq7xwOgsEcaHYudppEsN7EzyDbw9Y4y0i+OXc1wJfUSJJuOy+3p6AVlmhcH t2VCC873d+ZLLVMTVlfxSK47jQ3lxxRoB6ChJrnbpqDTb8M6HIR5J0i+FQvNrypg JKKP8olr2SX+QndMTZs3Zd+sNbAYiUK98fI2luljSURvcGisNHuL8Bl06VRLBRmZ 3YOU+aQKgsN5n8XQdRd69CmwJgiOy5VeJdxqNC1rkn6z1t9g2uFAtzaz/Hc9Ux4b AUV1oXkbNhLY277639UXoSQRWQ== -----END CERTIFICATE-----Generated at Tue Nov 4 06:48:07 2025 by rpki-client